Transforms.conf
[force_host_for_testdata]
DEST_KEY = MetaData:Host
REGEX = server:([^\\]+)
FORMAT = host::$1
[force_host_for_testdata_1]
DEST_KEY = MetaData:Host
REGEX = MQ:\s+([^\\]+)
FORMAT = host::$1
-------------------------------------
Props.conf
[test_st]
TZ = GMT
LINE_BREAKER = \d{4}-\d{2}-\d{2}\s+\d{2}\:\d{2}\:\d{2}\s+Information\:
SHOULD_LINEMERGE = false
TRANSFORMS-force_host_for_testdata = force_host_for_testdata
TRANSFORMS-force_host_for_testdata_1 = force_host_for_testdata_1
This config works on my local machine, but when pushed to heavy forwarders it doesn't work!
Need suggestions as to what is going wrong?
↧